This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          M0rwZo5sCKZ42vRgicmd9RovXWiWC36Gt7zZZAUrrLs=
Subject key identifier:   D2:4B:5B:97:C7:27:23:98:30:3D:8D:AF:F6:77:83:B0:20:1C:89:07
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       019B386A0D0359F0EC965639EFDFABBCAF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          080E
Signing time:             Fri 19 Dec 2025 21:00:32 +0000
Manifest this update:     Fri 19 Dec 2025 21:00:32 +0000
Manifest next update:     Sat 20 Dec 2025 21:00:32 +0000
Files and hashes:         1: 1wmzqwE2ku8n0Mm8ErGyhHCrJOk.roa (hash: c652pSMHzVee2CwYp/svFjVJzZcqt1kjmMsHG7p6sR4=)
                          2: 3M77FQFV6iiOUx3kj5ltTV-Ss6g.roa (hash: ID80XwGiXRTSswVcjaFJF1FTfgWMTYqaJ3DgCgi0vSU=)
                          3: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=)
                          4: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=)
                          5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=)
                          6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: 7eKu6zHlsxVQQKEG02nU0FIGftFWyciES68vAwm9Q54=)
                          7: FpoddKCGr-EmD3JxWU1OzHrVJLc.roa (hash: ROi2eo4TqhcCCb7fNgBCVSOXbPuRbOQtHq9ApAAA5F4=)
                          8: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=)
                          9: J3RxYtXsPYVa3XDH4q32OG5y5dg.roa (hash: 1HRhTzYjnMTo//uP+tjQuq+ctXBbL7r5+7rziSgVvFY=)
                          10: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=)
                          11: OG0rDdymXMd6_rDI8itWThmJDlI.roa (hash: ViV8MW1OvZq4mlHYhO2nlGv1TLuKI9kbW+K8qAMrIA8=)
                          12: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=)
                          13: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=)
                          14: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=)
                          15: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=)
                          16: p8XI18_G0w6VQzp-cFuSc-YU7KU.roa (hash: 5L36hI/Ib9EXnAz7w+VyYhvbv64/xZKpeIB+xqORWK4=)
                          17: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=)
                          18: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:6a:0d:03:59:f0:ec:96:56:39:ef:df:ab:bc:af:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Dec 19 21:00:32 2025 GMT
            Not After : Dec 20 21:00:32 2025 GMT
        Subject: CN=d24b5b97c7272398303d8daff67783b0201c8907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:44:fb:13:d1:e2:49:1a:35:fe:7a:0c:9a:
                    29:54:ae:49:ab:7d:c6:7d:56:cc:c7:ad:8a:2d:d1:
                    85:61:17:af:fd:95:bf:12:2a:12:8a:bc:38:68:1c:
                    77:42:47:bb:d8:40:f4:ac:8c:d5:16:05:be:4c:72:
                    c9:cd:01:65:e1:02:dc:1a:b5:8e:e5:44:8e:b6:4c:
                    48:0a:99:66:fc:59:e2:4d:5f:53:d4:c5:f3:e2:5f:
                    8f:e5:39:21:23:4c:03:69:48:7c:84:1c:91:d8:5b:
                    53:7b:61:b1:ea:77:ff:cf:38:9b:49:b6:9a:9d:be:
                    dc:ba:ce:1f:06:26:c9:43:cf:ba:28:a9:a8:15:bc:
                    36:55:fe:c0:15:af:93:41:df:eb:c5:44:90:6d:d0:
                    08:f1:53:bb:6c:c1:5a:9e:03:96:d3:57:44:43:7a:
                    4e:bb:5a:ca:b7:f7:12:70:5f:dc:7a:ad:6a:2e:6b:
                    01:68:4d:2b:6a:e4:4f:c9:8a:d9:64:8e:ae:5b:87:
                    18:c0:c1:1a:19:8f:97:f0:24:ea:b9:f2:7b:e0:86:
                    f7:ee:b9:1b:ce:18:5b:40:11:3d:24:3e:17:ed:0b:
                    38:51:c0:21:d3:67:a5:9d:81:81:3d:f1:07:ad:8f:
                    32:57:8b:c1:9f:99:a2:66:a3:db:a5:f7:0a:5d:1b:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4B:5B:97:C7:27:23:98:30:3D:8D:AF:F6:77:83:B0:20:1C:89:07
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e8:e8:6f:87:d6:48:33:23:55:02:5e:2f:1d:72:54:d3:54:
         0d:c8:48:fe:06:11:28:0f:a5:98:97:4e:8c:69:70:74:21:e5:
         a6:cb:78:3f:90:ab:05:57:51:af:10:a8:ed:b3:d3:60:ec:8e:
         e2:88:81:4f:d4:b4:c7:19:d8:b3:56:91:33:71:1f:13:58:71:
         f1:19:43:4f:e5:18:0a:54:99:5a:ed:82:02:75:0b:16:f2:a9:
         8b:72:b3:c0:0d:72:ab:ed:ec:8c:0a:4a:4f:c9:03:68:a5:e8:
         a4:47:fd:f2:81:d9:47:ca:7d:e1:5c:90:ab:47:94:08:b2:2f:
         2b:d8:57:4a:c5:1f:15:2e:86:b4:ec:9b:68:ac:0d:7c:01:0a:
         99:e1:de:48:55:1b:3c:64:95:f7:37:c4:a0:25:cb:c2:a4:56:
         ab:73:dd:2a:a7:7a:ee:84:54:3d:f4:83:bb:58:ab:6e:2e:1b:
         20:8e:49:91:0c:5a:ef:83:9b:6b:42:ed:c1:86:42:4c:be:b8:
         fa:ef:06:31:a1:30:95:05:27:21:cb:12:9e:00:a8:d8:4f:4b:
         c9:0e:db:d3:9a:c9:90:ba:51:9c:c6:34:5f:be:ee:c1:53:2a:
         0c:ed:be:70:c4:b7:f1:4d:07:7a:d9:e4:15:4a:9d:8c:d8:bb:
         d8:a4:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:38:43 2025 by rpki-client